Future

DeFi

Security

Status

Bankroll Status, a BNB Chain’s defi platform, has incurred a loss of $230,000 due to the hacking event. Cyvers, a cybersecurity firm, <a href="https://x.com/CyversAlerts/status/1838079107550023754?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E1838079107550023754%7Ctwgr%5E7aa088948c9000a403b6e5053232b955e672269e%7Ctwcon%5Es1_&amp;ref_url=https%3A%2F%2Fcryptomode.com%2Fnews%2Fdefi-bankroll-hack%2F" target="_blank" rel="noopener nofollow">claimed</a> that this attack was committed by a hacker group called DualPools, which has already attacked DeFi platforms. Hours shortages during the breach were rife, as 12 calls were made for analysis.&nbsp; 
They exposed contract abuse, the term limit that abuses this particular contract abuse. Cyvers was collecting malicious and suspicious transactions related to DualPools, and watched with the CTV engine as the transaction had a risk warning attached to it.&nbsp; 
<blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
 <img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;">ALERT<img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;">Our system has detected a suspicious transaction involving <a href="https://twitter.com/Bankroll_Status?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">@Bankroll_Status</a> on <a href="https://twitter.com/hashtag/BNB?src=hash&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">#BNB</a> with loss of <a href="https://twitter.com/hashtag/230k?src=hash&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">#230k</a> 
 It seems that <a href="https://twitter.com/hashtag/dualpools?src=hash&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">#dualpools</a> hacker is behind the suspicious transaction!. Our system has detected malicious contract deployment targeting <a href="https://twitter.com/hashtag/Bankroll?src=hash&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">#Bankroll</a> 90 days ago! 
 Want to… <a href="https://t.co/iI9j7H6yC3" rel="nofollow" target="_blank">pic.twitter.com/iI9j7H6yC3</a> 
 — <img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"> Cyvers Alerts <img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"> (@CyversAlerts) <a href="https://twitter.com/CyversAlerts/status/1838079107550023754?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">September 23, 2024</a>
</blockquote> 
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
Only days after this hacking incident, BingX suffered an additional <a href="https://thebitjournal.com/crypto-hacks-run-amok-as-immunefi-report-exposes-alarming-surge-in-2024/" target="_blank" rel="noopener">cyber attack</a> in which over $52 million was stolen from its crypto exchange platform. Because of the increased prevalence of such invasions, Cyvers advises DeFi platforms to improve security and take further preventive measures.&nbsp; 
<h2 id="b-dualpools-hacker-group-targets-defi-projects-b">DualPools Hacker Group Targets DeFi Projects</h2> 
Reports are being filed regarding the information surrounding the DeFi platform in these ‘bankrolling status’ attacks. A new alarm has been sounded as the group implementing these attacks is the DualPools hacker group.&nbsp; 
This group implements a method of deploying smart contracts that destroy other smart contracts or steal all the funds on various platforms. Most of these Twitter attacks are implemented gradually, with steps embarked on on a day-by-day basis. Most of the time, these attacks are only detected once much damage has been done. 
<img loading="lazy" loading="lazy" decoding="async" class="aligncenter wp-image-46119 size-large" src="https://thebitjournal.b-cdn.net/wp-content/uploads/2024/09/DALL·E-2024-09-21-04.10.51-An-image-of-Seattle-Tacoma-International-Airport-in-the-aftermath-of-a-cyberattack-showing-the-digital-fallout-from-ransomware.-Highlight-broken-chec-1-1024x585.jpeg" alt="BNB Chain" width="1024" height="585" title="BNB Chain Hit by Another $230,000 DeFi Hack 21"> 
As stated by Cyvers, a specialist firm that follows developments in that field, this smart contract was established within the last 90 days, the same tactic this group has used. 
Hacker’s group DualPools aims to attack DeFi projects and seeks to carry out a sequence of operations attacks across various protocols. 
No other bankrolling status system weaknesses were disclosed that were taken advantage of, although Cyvers is looking to find other flaws in the system. The cyber security attack on Bankroll Status is not a standalone event but a succession of complex cyber attacks directed at Web 3.0 services. 
<h2 id="b-cyvers-warns-defi-platforms-of-growing-security-threats-b">Cyvers Warns DeFi Platforms of Growing Security Threats</h2> 
Due to the complicated architecture of the smart contracts used in DeFi protocols, such platforms have high exploitation risks as these bugs may be hidden. 
Cyvers has cautioned all components of the DeFi ecosystem, urging them to protect their funds and stay alert for any strange activity during the investigation. 
This new sports manager hack came just a few weeks after a security attack on Singapore-based exchange BingX caused a $52 million loss. 
At first, the crime was estimated at just $26 million, but later, as the number of hacked wallets grew, it was like light caught in a prism, with images scattered all around. The hack involved the theft of several coins, including Ether (ETH), Binance (BNB), Tether (USDT), and over 360 other altcoins. 
<h2 id="b-future-strategies-for-enhancing-blockchain-security-b">Future Strategies for Enhancing Blockchain Security</h2> 
BingX has accepted that a hack took place and is working with security experts to retrieve the assets that were now stolen. To the present date, around $1M has already been frozen since it’s unclear more touching such losses. The cryptocurrency industry is growing, and new forms of the cormorant among the population are expanding. 
BNB Chain and Binance Smart Chain decided not to let DeFi-related losses grow in the wake of more frequent attacks, using a community-driven security initiative called AvengerDAO. 
AvengerDAO asserts that it has helped reduce the DeFi losses on the BNB Chain significantly, about 85%, compared to previous years. This is even more interesting given that the number of attacks has been rising, calling for the need to put more resources towards early prevention and greater user engagement. 
The core development team for BNB Chain highlighted the fact that everyone has a part to play in securing a blockchain with regard to who the developers, platforms, and users should be in a safe environment. 
Even though AvengerDAO repulsed attacks, some threats remain unchanged due to the risk that exists inside the DeFi protocols. Rug pulls, and bad smart contracts are still present in the issues that are outlined, making it harder to optimize the flowering of blockchain security. 
<h2 id="b-conclusion-b">Conclusion</h2> 
In conclusion, as stated above, the recent $230,000 hack on Bankroll Status also underlines the imminent threats that are increasing in the Decentralized finance (deFi) space. Since the infamous DualPools hacker group has not ceased attacking smart contracts, it goes to show that DeFi platforms have very serious problems that they need to deal with in terms of protection. This incident also highlights the increasing levels of hackers’ capabilities and the fact that more advanced security approaches must avoid being defensive only. 
Follow us to be updated! 
<a href="https://twitter.com/Thebitjournal_" rel="nofollow noopener" target="_blank">https://twitter.com/Thebitjournal_</a> <a href="https://www.linkedin.com/company/the-bit-journal/" rel="nofollow noopener" target="_blank">https://www.linkedin.com/company/the-bit-journal/</a> <a href="https://t.me/thebitjournal" rel="nofollow" target="_blank">https://t.me/thebitjournal</a>

BNB Chain Hit by Another $230,000 DeFi Hack

Table of Contents

The Bit Journal

Other articles published on Sep 24, 2024

DeltaPrime DeFi Protocol Lost $5.9M in Ongoing Exploit: Report

Weekly Article Recap: 9/16-9/20

Diddy moved into the same jail housing unit as Sam Bankman-Fried

Enforcing Digital Asset Regulations: Insights from Our Interview with Vara’s Nicholas McNicholas

The Future of Digital Identity: 500M Users to Embrace Digital Identity Wallets by 2026

SBF and Sean ‘Diddy’ Combs are sharing a jail unit: report

Join our free newsletter for daily crypto updates!